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Abstract 

We propose a scheme by which two parties can secretely and simultaneously ex- 
change messages. The scheme requires the two parties to share entanglement and 
both to perform Bell-state measurements. Only two out of the four Bell states are 
required to be distinguished in the Bell-state measurements, and thus the scheme 
is experimentally feasible using only linear optical means. Generalizations of the 
scheme to high-dimensional systems and to multipartite entanglement are consid- 
ered. We show also that the proposed scheme works even if the two parties do not 
possess shared reference frames. 



1 Introduction 



Entanglement is an essential resource for many applications in quantum infor- 
mation science such as quantum superdense coding[l,2] quantum teleportation[3,4,5,6,7,8], 
quantum cryptography [9, 10, 11], and quantum computing [12, 13]. From an information- 
theoretic point of view, two parties sharing entanglement can be regarded to 
have already a certain amount of information distributed between them; one 
e-bit per a shared maximally entangled pair of qubits. Thus, for example, 
in superdense coding two bits of information can be sent from one party to 
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another by manipulating only one of two maximally entangled qubits. In quan- 
tum teleportation a quantum state of a qubit can be completely transferred 
by sending only two bits of classical information, if the two parties, the sender 
and the receiver, share a maximally entangled pair. 

In this work we explore yet another situation in which two(or more) parties 
can make use of entanglement they share to their advantage. We consider a 
situation in which two parties, Alice and Bob, share a maximally entangled 
pair A and B of qubits. Alice makes a Bell-state measurement upon the qubit 
A and another qubit a she prepared in a state about which only she has the 
information. Bob also makes a Bell-state measurement upon the qubit B and 
another qubit (3 he prepared in a state about which only he has the infor- 
mation. We are interested in the probability for each of the sixteen possible 
joint measurement outcomes, which in general depends upon the states of the 
qubits a and (3 in a way characteristic of the shared entanglement. If Alice 
keeps the information on the state of qubit a to herself and Bob keeps the 
information on the state of qubit (3 to himself, they have a partial knowl- 
edge of the probabilities in advance that others do not. We suggest that this 
advantage can be exploited to devise a method by which Alice and Bob se- 
cretely and simultaneously exchange messages. Generalizations of the method 
to higher- dimensional systems("qudits") and to multipartite entanglement are 
also discussed. 

2 The Basic Scheme 

Let us suppose that two parties, Alice and Bob, share a maximally entangled 
pair A and B of qubits. The qubits A and B can be in any of the four Bell 

states 

\^) AB = -L £ (-l) jq \q) A \q + i) B \ ^,J = 0,1^ (1) 
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Fig. 1. Experimental Scheme. The EPR(Einstein-Podolsky- Rosen) source emits an 
entangled pair in state |$oo)ab- Alice performs a Bell-state measurement on the 
qubit pair a and A, and Bob performs a Bell-state measurement on the qubit pair 
(3 and B. BSM stands for Bell-state measurement. 



but for the sake of concreteness of argument, we take it as 



\% )ab = ^(\0) a \0) b + \1) a \1) b ) 



Alice has in her possession another qubit a which she prepared in state 



(2) 



a |0) a + ai|l) a 



(3) 



Similarly, Bob has in his possession yet another qubit (3 which he prepared in 
state 

|^>/3 = 6o|0) /3 + 6 1 |l>^ (4) 

Now Alice performs a Bell-state measurement on the pair a and A, and Bob 
performs a Bell-state measurement on the pair (5 and B. The experimental 
scheme is depicted schematically in Fig. 1. 



The probability Pi l j 1 i 2 j 2 {ii,ji,i2,j2 — 0,1) that Alice's Bell-state measure- 
ment yields l&i^aA and Bob's Bell-state measurement yields \&i 2 j 2 )pB can 
be obtained by expanding the total wave function \if)) a 0AB = l^) a]^) ab 
as 



l 

K/3AB = X/ I ®hji) a A \®hj2 ) j3B ^hhnh 
H,jl,i2,j2=0 



(5) 
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A straightforward algebra yields 



Vi 



U .71*2.72 
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-l) (,1J1+i232) \a h b h + (-l) {n+h) a ll+1 b l2+1 



(6) 



where all indices are evaluated modulo 2. The probabilities Pi 1 j 1 i 2 j 2 ' s are given 
by 

Phjii2h ~ I^iii«2j2| 2 - F rom Eq.(6) we immediately obtain 
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(7a) 
(7b) 
(7c) 
(7d) 



We note that, since Alice prepared the state of qubit a and thus knows what 
a and a± are, and similarly since Bob prepared the state of qubit (5 and thus 
knows what bo and b\ are, Alice and Bob have a partial prior knowledge of 
the probabilities P^j^^s. We suggest that they can take advantage of this 
knowledge to secretely exchange messages. 

The scheme we propose goes as follows. We suppose that Alice and Bob share 
a large number N(^> 1) of maximally entangled pairs A's and B's. We further 
suppose that Alice has an equally large number N of qubits a's, each of which 
she prepared in state (3), and that Bob has N qubits /3's, each of which he 
prepared in state (4). Alice keeps the information on the state of qubits a's 
to herself and Bob keeps the information on the state of qubits /3's to him- 
self. Alice and Bob then perform a series of N Bell-state measurements on 
each pair a and A, and (3 and B, respectively. They announce publicly their 
measurement results only when the outcome is either $i or $n (this consid- 
erably eases the burden on the Bell-state measurements, because only these 
two Bell states can be unambiguously distinguished with linear optical means 
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[2,7,14]). By counting the number Nij^ of occurrences for the joint outcome 
\^^-h) aA^^n) pbi ^ ne probabilities -Pi^i^'s = 0,1) can be determined 

experimentally as 

r ih^h - N \°) 
When the four experimentally determined probabilities Pij^'s (PfoTo) AT11? 
Pion, -Pino) are substituted for the probabilities -Pijiij 2 ' s of Eqs. (7a) and 
(7b), we obtain two equations that relate the four constants ao, a±, &o and b±. 
Since Alice knows the values of ao and a±, there are only two unknowns bo 
and bi [ the constants b and b\ are complex numbers, but they are subject 
to normalization and the overall phase can be ignored] to her. Likewise, there 
are only two unknowns a and ai to Bob. To any third party, however, the 
number of unknowns is four. We can thus conclude that only Alice and Bob 
can completely determine the four constants ao, ai, b and b\. Let us suppose 
that Alice and Bob have secret messages they wish to send to each other. If 
they prepare their messages in the form of two constants, the scheme described 
above can be used for them to achieve a secret two-way communication. We 
mention that a scheme which is different from our proposed scheme but allows 
two parties to simultaneously exchange their messages as our proposed scheme 
does has recently been proposed[15]. 



3 Efficiency 

Let us now estimate the efficiency of the scheme described in the previous sec- 
tion. When a sufficiently large number N 3> 1 of Bell-state measurements are 
made by Alice and Bob each, the number N il j li2 j 2 of times the joint outcome 
l^iui) aA\^i 2 j 2 ) I3B is counted lies within the range defined as[16] 



NP — hNP T\ — P ^ < N exp < NP 4- hNP ■ T\ — P 

(9) 
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where P^j^^s are the exact theoretical probabilities given by Eqs.(7). Thus, 
the accuracy of the experimentally determined probabilities P^i 2 j 2 = N^^/N 
is limited by 



Eq.(lO) is valid as long as Alice and Bob perform each of their Bell-state 
measurements individually, which we assume here. [If a collective approach is 
adopted, for example, if Alice performs all N Bell-state measurements before 
Bob makes any of his measurements and sends the message containing the 
outcome of all her measurements to Bob, and if Bob, upon receiving Alice's 
message, performs his Bell-state measurements in an appropriate collective 
way, it may be possible to obtain a higher accuracy for P^i 2 j 2 - Further re- 
search is needed on the collective approach.] Eq.(lO) indicates that, in order 
to obtain P^ x f^^ accurate to one decimal point, which would allow Alice and 
Bob to share four real values cos 9a, cos <f>A, cos 9b, cos 4>b (a = cos6*a, Oi = 
sin^e*^ 4 , b = cos6 B , Oi = sm9 B e l ^ B ) accurate to one decimal point each, Al- 
ice and Bob should perform ~ 100 (perhaps a few hundred) Bell-state measure- 
ments each. We therefore conclude that Alice and Bob gain 4 secret digits(or 
equivalently 13~14 secret bits) at the expense of ~ 100(a few hundred) entan- 
gled pairs, i.e., the number of secret bits gained per use of an entangled pair 
is roughly 0.1 or less. The efficiency of the proposed scheme is thus somewhat 
lower than that of the entanglement-based cryptographic scheme (E91) [9]. 

We note that the proposed protocol can be used for Alice and Bob to send 
secretly to each other directions in space and consequently to possess two pri- 
vate shared reference frames. They need of course to store the information on 
their Euler angles in the constants ao, a\ and bo, b±, respectively. Shared refer- 
ence frames are a resource for quantum communications [17,18,19]. A standard 
protocol[18] to send directions in space when Alice and Bob share entangled 




(10) 
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pairs, say in (§ 00 ) AB , requires Alice to perform a projection measurement in 
her |0) — |1) basis on the particle A of each entangled pair and announce 
publicly the outcome of each measurement. Bob would then follow with his 
projection measurement in his |0) — |1) basis on the corresponding particle B 
of each entangled pair. If a sufficiently large number iV ^> 1 of projection mea- 
surements are performed by Alice and Bob, the number N s of times that Alice 
and Bob obtain the same measurement outcome will be given by jf- = cos 2 9, 
where 6 is the angle between Alice's and Bob's axes.[ We assume that qubits 
are polarized photons. If we take spins for qubits, then jf- = cos 2 |]. Provided 
that Alice and Bob perform each of their projection measurements individu- 
ally, essentially the same statistical analysis based on Eq.(9) applies here, and 
thus the efficiency of our proposed protocol is of the same order of magnitude 
as that of this standard entanglement-based protocol. [If, however, we allow 
Bob to make collective measurements in the standard protocol, the efficiency 
can be higher. See, for example, Ref. [20].] Our protocol, however, requires 
both Alice and Bob to perform Bell-state measurements, which are in general 
more difficult to perform than von-Neumann projection measurements. One 
advantage of our protocol is that it is symmetric with respect to Alice and 
Bob and allows both Alice and Bob to gain information, whereas in standard 
schemes the information usually flows one way. 



4 Generalization to higher-dimensional systems 

We now consider a generalization of the above scheme to higher-dimensional 
systems, i.e., to "qudits". The generalized Bell states for a qudit can be defined 
as [21,22] 

^ d-i 

\®ij)AB = - 7 =Y, u}jq \ ( l)A\q + i)B; i,j = 0,l,...,d-l (11) 
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where u = e l 2 . Let us assume that Alice and Bob share a large number 
N(> 1) of entangled pairs A's and I?'s in the generalized Bell state |$oo)ab- 
Alice performs a series of N Bell-state measurements on pairs of qudit A and 

d-l 

another qudit a she prepared in state \ijj) a = J2 a>i\i)a, while Bob performs a 

i=0 

series of N Bell-state measurements on pairs of qudit B and yet another qudit 

d-l 

(5 he prepared in state — h\i)p- As in the qubit case, the total wave 
function \ip) a /3AB can be expanded in terms of the products of the generalized 
Bell states \®i 1 j 1 ) a A\®i 2 j 2 ) PB as 

d-l 

\4>)a/3AB = \®iiji)aA\®i 2 j 2 )l3BVi ljl i 2j2 (12) 

»1,J1,*2,J2=0 

where V iljli2h is given by 

Y d-l 

Viijii 2 j 2 ~ 1= W 3 y ' W Q>m—i\b m —i 2 (13) 

where all indices are now evaluated modulo d. Eq.(13) indicates that the prob- 
abilities fjjjiiaja — \Vhjii 2 j 2 \ 2 take on the same value if i\ — ^(mod d) is the 
same and if ji + j 2 (mod d) is the same. Thus, there are d 2 different values of 
the probabilities P^j^^s. Eq.(13) then provides (d 2 — 1) independent equa- 
tions that relate the constants, ao, a±, . . . , aa-i] bo, b±, . . . , bd-i- To any third 
party other than Alice and Bob, the number of unknowns contained in these 
constants is (Ad — 4). There are , however, only (2d — 2) unknowns, as far as 
Alice or Bob is concerned. By agreeing to publicly announce their measure- 
ment results only when the outcome is among judiciously chosen generalized 
Bell states, Alice and Bob can limit the number of probabilities that can be 
determined experimentally in such a way that the number of equations that 
relate the experimentally determined probabilities with the constants a^s and 
fei's is greater than or equal to (2d — 2) but less that (Ad — A). This way, Alice 
and Bob can send secret messages in the form of (2c? — 2) constants to each 
other and as a result secretely share (Ad — 4) constants between them. 
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As an example consider the case d = 3. If Alice and Bob announce results of the 
Bell-state measurements only when they measure either <3> o or <3> 21 , they can 
determine experimentally the four probabilities Poooo, -^2m> ^0021 an d -P2T005 
which are given by 



1 2 
-Poooo = 2y l°o fe o + ai&i + a 2 & 2 | 



-P2121 — 



-P0021 — 



27 
1 

27 

P _ 1 



a feo + aiftia; + a 2 6 2 u; 2 
a 2 5 + a-oh^ 2 + ai6 2 ^ 
aibotu 2 + a^>\ijj + ao& 2 



(14a) 
(14b) 
(14c) 
(14d) 



where a; = e*"^ 1 . Eqs. (14a)-(14d) are sufficient for Alice and Bob to determine 
their four unknowns, allowing them to exchange messages in the form of four 
constants each. 



5 Generalization to multipartite entanglement 

Another possible generalization of the proposed scheme is to the case of mul- 
tiparty communications. Let us consider the case when N(> 2) parties share 
an N-qubit entangled state of Greenberger-Horne-Zeilinger (GHZ) type [23] 
given by 

\®)ab...n = ^= (\0)a\0)b ■ ■ ■ \0)n + \1)a\1)b ■ ■ ■ \1)n) (15) 

where the letter N(also the small letter n and the Greek letter v) refers to the 
Nth party or Nth qubit. Each party has, in addition to the qubit K of Eq.(15) 
[ the letter K (and also the small letter k and the Greek letter k) denotes the 
Kth party or Kth qubit, where 1 < K < N], another qubit k which she or he 
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prepared in state 

M« = A; |0) K + A; 1 |1) K (16) 

Each party then performs a Bell-state measurement upon the qubits k and 
K. The total wave function for the 2N qubits a, (3, . . .v, A, B, . . . N can be 
expanded as 

1 

\lli)a,(3,...v,A,B,...N — (®hji) a A (^2.72) (3B " " " (^»iviff)i/JV ^iii*2j2---*jviiv 

h,ji,i2,j2,---,iN,jN=0 

(17) 

A straightforward algebra yields 

^iii*2i2---«jviiv 

Oii&j 2 • • • fl iN + ( — 1)-? 1+ -? 2 + +Jjv aj 1+ i&j 2+ i . . . fli N+ i 

(18) 

In Eq.(18), the constants n and rii define the state of the qubit v in which 
the Nth party prepared according to 

|^) v = no|0)„ + ni|l) I/ (19) 



(_ y 1.71 +12.72 H HnJn 



Eq.(18) indicates that there are 2 N different values for the probabilities Pi 1 j 1 i 2 j 2 .. 
= \Vi 1 j 1 i 2 j 2 „_i N j N \ . To any member of the N parties sharing the entanglement 
of Eq.(15), the number of unknowns is (2iV — 2), while it is (2N) to any out- 
sider. As before, by agreeing to publicly announce the measurement results 
only when the outcome is among judiciously chosen Bell states, each of the 
N parties can secretely send his message in the form of two constants to all 
others of the N parties, so that the N parties can share secretely the messages 
in the form of 2N constants. 

As an example, consider the case N = 3. Let us assume that the three parties, 
Alice, Bob and Charlie agree that Charlie is the last one to make an announce- 
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merit each time, that Alice and Bob announce the measurement results only 
when they obtain either $ 10 or $ n , and that Charlie announces his mea- 
surement result only when both Alice and Bob announce their measurement 
results and he(Charlie) obtains either <3>i or $n or <3> o- The probabilities that 
can be determined experimentally are then the following: 



^101010 — ^lonn — ATmo — ATion — \ a ^o c o + dihcif (20a) 

ATioio — ^iomo — ^lofoii — Pnnn = tt. ko^oO) - a\^\C\\ (20b) 

lb 

A e onoo = ATfooo = \a b ci - ai&ic | 2 (20c) 

^lofooo = Amoo = ^ \aob ci + ai&ic | 2 (20d) 

Since each of Alice, Bob and Charlie has four unknowns, she or he can use 
Eqs. (20a)- (20d) to solve for her or his unknowns. This allows Alice, Bob and 
Charlie to share secretely six constants among them. 

If Alice, Bob and Charlie are limited to linear-optical Bell-state measurements, 
they can only determine eight probabilities Pij^i^ (ji, 32,33 = 0, 1) of Eqs. 
(20a) and (20b) experimentally. In this situation, Alice, Bob and Charlie each 
needs to announce publicly one of the constants, say ao,&o an d c$. Each of 
Alice, Bob and Charlie then has two unknowns for which Eqs. (20a) and (20b) 
provide sufficient information. In this case, however, the number of constants 
that the three parties can secretely share is reduced to three. 



6 Case of no shared reference frames 



So far, we have assumed that Alice and Bob have exactly the same basis for 
the states |0) and |1). Thus, if the qubits we consider are polarized photons or 
spins, we assume that Alice and Bob share a spatial reference frame. As far as 
our proposed protocol is concerned, this shared reference frame does not need 
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Fig. 2. Alice's reference frame (|1) and |0)) and Bob's reference frame (|l') and |0')). 
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to be private, because the privacy of the protocol does not depend upon the 
privacy of the reference frame. The shared reference frame can, for example, 
be a specific direction with respect to a fixed star. 

It may happen, however, that Alice and Bob, for reasons of better security, 
want to use reference frames of their own choice which may not coincide, or 
that their reference frames are inadvertently misaligned. As show below, our 
proposed protocol still works, even if Alice's reference frame does not coincide 
with Bob's. Let us suppose that Bob's axis makes an angle 9 with respect to 
Alice's, as shown in Fig. 2. The initial state for the four particles a, (3, A and 
B are now written as 

= («o |0) Q + ai |1) J ^ (|0>a|0>b + \1)a\1)b) (b |0% + h |1%) 

(21) 

where|0) and |1) denote Alice's basis states and |0') and |1') Bob's basis states. 
We assume that Alice prepares the entangled pair A and B in |$oo)a_b, keeps 
A and sends B to Bob. Now Alice performs her Bell state measurement on the 
pair a A in her |0) — 11) basis, whereas Bob performs his Bell state measurement 
on the pair (3B in his |0') — |1') basis. We thus need to express |0)s and \1)b 
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in terms of |0')s and \1')b, and expand the wave function \^) a /3AB as 



a/3AB ~ X! \®nh)aA \Kn)p B V nm,n (22) 

UJ1,*2,J2=0 

where |^,-) refers to Bell states of Eq. (1) defined in terms of Bob's basis 
|0') and A straightforward algebra yields, for the probabilities Pi 1 j 1 i 2 j 2 — 
\V ■ ■ ■ I 2 

1 1 

Poooo — -Pirn = o \ a obo cos0 — CLib sin 9 + a bi sin 9 + a±bi cos9\ = -Pl 
8 2 

(23a) 



1 2 1 

-Poooi = Pino = o l a <A cos - ai&o sin - a &i sin - a x b x cos 0| = -P 2 
8 2 



(23b) 



Pooio = Pnoi = o l a o^o sin + a i^o cos + ao&i cos0 — ai&i sin 0| = -P 3 
8 2 

(23c) 



Poon — Pnoo — _ l a o^o sin + ai&o cos0 — a bi cos + a\b\ sin 0| = -P 4 
8 2 

(23d) 



Poioo = Pion — _ l a o^o cos0 + ai& sin 9 + a bi sin — a±bi cos0| = -P 5 
8 2 

(23e) 



Poioi — Pioio — _ l a o^o cos + ai6 sin — a &i sin + ai&i cos 9\ = -P 6 
8 2 

(23f) 
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Pono — -P1001 = o |a &o srn # — aib cos9 + a &i cos# + ai&i sin^l = -P 7 
8 2 

(23g) 

1 

-Pom = -Piooo = _ l a o^o si n $ — °i^o cos # — a o^i cos $ — sin $ 
8 

where the probabilities are further restricted by the identities 

Pi + P2 + P 3 + Pa = \ 

P 2 + P 3 = P 5 + Ps (24b) 

Pi + P A = P 6 + P 7 (24c) 

Comparison of Eqs.(23) with Eqs.(7) indicates that the misalignment of Bob's 
axis with respect to Alice's axis partly breaks degeneracies among the proba- 
bilities. For example, P 11U is no longer equal to Pioio, an d Pmo is no longer 
equal to Pion- The difference between these probabilities can thus be consid- 
ered as a measure of the misalignment. 



(23h) 



(24a) 



Our scheme for quantum message exchange can proceed exactly as before. We 
let Alice and Bob announce publicly their measurement results only when the 
outcome is either $io or $ n . The four experimentally determined probabilities 
Pioh), Pim> PioTi) an d Pmo then provide four equations, Eqs. (23a), (23b), 
(23e) and (23f), that relate the five constants; a , ai, b , b\ and the angle 9. To 
Alice(Bob) there are three unknowns bo, b±(ao, a±) and 9, whereas to any third 
party the number of unknowns is five. Only Alice and Bob can thus determine 
the five constants a ,ai,b ,bi and 9. Our scheme thus allows Alice and Bob 
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not only to secretely share the four constants but also to determine the angle 
between their reference frames. 

7 Summary and discussion 

We have analyzed a situation in which each of two (or more) parties sharing 
entanglement performs a Bell-state measurement upon the entangled particle 
in his (or her) possession and another particle he (or she) prepared in a spe- 
cific state. The probability for a joint measurement outcome corresponding to 
a given combination of the Bell states depends critically upon the states of the 
particles involved. Taking advantage of the fact that each person belonging 
to the parties sharing entanglement and only he(or she) knows the state of 
the particle he(or she) prepared, we suggest a scheme by which two(or more) 
parties sharing entanglement can secretely and simultaneously exchange mes- 
sages. For the case of two parties sharing entangled qubits, the scheme requires 
Bell-state measurements that distinguish only two out of the four Bell states, 
which can be accomplished using only linear optical devices. The scheme thus 
provides an experimentally feasible means of two-way communication. 

We should emphasize that, although it may not be apparent at first sight, 
entanglement plays a critical role in the proposed scheme. It is through entan- 
glement that the joint probabilities appear in an "entangled" form as give in 
Eqs.(7) and that the separate probabilities for either Alice or Bob to obtain 
any arbitrary Bell state are evenly distributed regardless of which Bell state we 
consider. Information on the constants ao,ai,&o an d &i can be obtained only 
by looking at the joint probabilities. On the other hand, if the qubits A and 
B were not entangled, Alice's Bell-state measurements would be completely 
independent of Bob's Bell-state measurements, and information on the con- 
stants a and a\ (6 and b±) would be obtained by looking only at the results 
of Alice's (Bob's) Bell-state measurements. Bob(Alice) would need as much 
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information as any third party in order to determine ao and ai(&o and bi) from 
the results of Alice's (Bob's) Bell-state measurements. The parties sharing en- 
tanglement have advantages only because the joint probabilities for Alice's 
and Bob's Bell-state measurements are "entangled". Of course, the maximal 
advantage is provided by the maximal entanglement which we have assumed. 
In general, as the degree of shared entanglement is decreased, the joint proba- 
bilities exhibit less degree of entanglement, and as a result the parties sharing 
entanglement has less degree of advantage over a third party. 
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